Add agenix secrets management / test forgejo runner deployment

services/forgejo-runner/default.nix

@@ -0,0 +1,23 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.services.vm_forgejo;
+in
+{
+  options.services.vm_forgejo = {
+    enable = lib.mkEnableOption "Enable Forgejo service";
+  };
+  config = lib.mkIf cfg.enable {
+    services.forgejo-actions-runner = {
+      package = pkgs.forgejo-actions-runner;
+      instances.default = {
+        enable = true;
+        name = "monolith";
+        url = "https://git.le43.eu";
+        tokenFile = config.age.secrets.forgejo-runner-token.path;
+        labels = [
+          "ubuntu-latest:docker://node:16-bullseye"
+        ];
+      };
+    };
+  };
+}